ISC2 CC Practice Question: Business Continuity, Disaster Recovery, and Incident Response
Which of the following best describes a Disaster Recovery Plan (DRP)?
⚠ Common exam trap
CC often tests the distinction between DRP (IT system recovery) and BCP (business operations continuity) — candidates frequently swap the two definitions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A plan to restore IT systems after a disruption
A Disaster Recovery Plan (DRP) is specifically focused on restoring IT systems, applications, and data after a disruption — it defines recovery time objectives (RTO), recovery point objectives (RPO), backup restoration procedures, and failover steps. It is a subset of the broader Business Continuity Plan (BCP).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A plan to restore IT systems after a disruption
Why this is correct
A DRP documents the procedures, roles and resources for recovering IT systems and data after an outage, disaster or cyber incident. Restoring IT systems after a disruption captures its core purpose, distinguishing it from business continuity planning, which covers broader operations during the event.
- ✗
A plan to evacuate personnel during an emergency
Why it's wrong here
Evacuating personnel is an emergency response or life-safety procedure, typically part of an occupant emergency plan. A DRP addresses restoring IT systems and data after a disaster. The confusion arises because both are invoked during incidents, but evacuation protects people, not technology recovery.
- ✗
A plan to identify critical business functions
Why it's wrong here
Identifying critical business functions belongs to a Business Impact Analysis, which feeds the DRP rather than being it. It is tempting because BIA output shapes recovery priorities, but the DRP itself documents recovery of IT systems and data after disruption, not the initial function-ranking exercise.
- ✗
A plan to keep the business running during a disruption
Why it's wrong here
Keeping the business running during a disruption is business continuity management, which sustains operations throughout an incident. A DRP instead restores IT infrastructure and data after a disaster has occurred. The overlap tempts candidates because both address disruption, but the axis is continuity versus post-event recovery.
Go deeper
Related to this question
Learn chapter
Business Continuity and Disaster Recovery
Key term
Disaster recovery
Disaster recovery is a set of policies, procedures, and tools that help an organization restore critical IT systems and data after a disruptive event.
Key term
Business Continuity Planning
Business Continuity Planning is the process of creating a strategy to keep an organization's essential functions running during and after a major disruption.
About these practice questions
Courseiva writes every CC question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.